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This listing of claims will replace all prior versions and listings of claims in the application: 
Listing of claims: 

1 (currently amended) [[The]] A method for providing cryptographic functions to data ^acikejte at 
the PPP layer of a network stack, the method including the steps of: 

intercepting PPP datagrams inbound to said network stack and outbound of network 
stack, said PPP datagrams having at least one encapsulated data packet en route along the 
preteeel network stack; 

decapsulating said PPP datagrams to retrieve said at least one encapsulated data packet; 

determining whether to process said at least one data packet by examining said data 

packet; 

modifying said data packet to provide said cryptographic functions; and 
encapsulating said at least one data packet for transmission to a next layer of said 
network stack. 

2. (original) The method of claim 1 wherein said data packet is an IP packet having a header, pi 
address and data. 

3. (original) The method of claim 1 wherein said step of modifying said data packet includes tpe 
further step of selecting an IPSec protocol. 



4. (currently amended) The method of claim 1 wherein the step of examHMftgj determining 
whethe r tp pro&ess said at least one data packet bv examinin g said data packet further in01udei; 
the &f$fe®f steps of: 

checking header information of outbound data packets from said network stack tcj 
determine if processing applies; and 

checking header information of inbound packets to said network stack to determine if 
said data packets include cryptographic functions. 
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5. (currently amended) [[An]] A system for processing data packets for secure communicatio ns 
between correspondents of said system by providing cryptographic functions to data packets! at 
the PPP layer of a network stack, said system having: \ j| 

a packet interceptor to intercept PPP datagrams inbound to said network stack ahd : 

i ! 

outbound of said stack, said PPP datagrams including at least one [[data]] encapsulated IIP 
packet, and to decapsulate said PPP datagrams to retrieve said encapsulated! IP packet; I 

a security policy manager for storing processing rules for said data plackets and selecting, 
at least one of said processing rules for said data packet; and 

a processing module for processing said data packet by selecting an4 applying said 
cryptographic tranoformationa fimsJions on said data packet, said processing module in \ 
communication with said security policy manager; 

wherein PPP datagrams are intercepted in accordance with said processing rules] ; 

; i 

6. (original) The system of claim 5, wherein the packet interceptor is a software module llocatjed 
at the PPP layer of the network stack. 

7. (original) The system of claim 6, wherein said software module is a drive? included in 1 a ketfoel 
of an operating system in computer readable medium of said system. 



8. (currently amended) The system of claim 5, wherein the cryptographic tranoformations 
filiations are implemented using an IPsec protocol by said processing module. 



9. (currently amended) The system of claim 5, wherein said secure communications between 
correspondents [[is]] of said system ye provided via a virtual private networjc. 



10. (currently amended) [[An]] A method for providing a cryptographic system for 
communication between correspondents in a communication network to dataj packets at the PPP 
layer of a network stack, said method having comprising the [[step]] stgDj ofs 

providing a security module in a computer readable medium at each olfsaid respondents, 
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said security module having: 

a packet interceptor for intercepting PPP datagrams having at' least one '■ ! : 
encapsulated data packet en route along the protocol stack and for dejcapsulating jsaid PPP 
datagrams to retrieve said at least one encapsulated data packet[[J] , ; |i 

a security policy manager for storing processing rules for said data packets ancjl : 
selecting at least one processing rules for said data packet; and j 

a processing module for processing said data packet by selecting and applying 
cryptographic functions to said data packet, said processing module ijn communication; 
with said security policy manager; 

i j 

examining said data packets outbound from said correspondent Js determine whejther 
processing by said processing module is required; and 

examining inbound data packets to said correspondent to determine whether prociessinjg 
by said processing module is required by checking whether said data packets include !■ 
cryptographic functions. !; 
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